# SZB-238e596fa7: mSeven Software warns mSecure users after cyberattack reportedly exposed customer database

mSeven Software reports a cyberattack that reportedly exposed an encrypted mSecure customer database.

- Type: Breach
- Status: Confirmed
- Vendor: mSeven
- Product: mSecure
- Disclosed: 2026-11-03 21:30 UTC
- Sources: 8 distinct
- First seen by cve.now: 2026-11-03 21:32 UTC · Updated: 2026-11-09 23:45 UTC

Written by a model from the sources below. Verify against them.

## Summary

It is warning current and former customers to take protective steps.

## What to do

- Change your mSecure master password and passwords stored in the vault
- Reset two-factor authentication on your mSecure account
- Remove and re-register passkeys tied to mSecure

## Timeline

- 2026-11-03 21:30 UTC: Made public by BleepingComputer
- 2026-11-03 21:32 UTC: First seen by cve.now
- 2026-11-04 16:00 UTC: Confirmed by mSeven Software. BleepingComputer: “According to the response, mSeven discovered the theft and subsequently notified customers.” ([source](https://www.bleepingcomputer.com/news/security/msecure-password-manager-hack-prompts-password-reset-warnings/))
- 2026-11-09 23:45 UTC: Record last updated

## Evidence (8 sources)

- 2026-11-03 · Social · [Mastodon](https://infosec.exchange/@cyberseckyle/117554637528316285): “mSeven alerted mSecure users to suspicious activity and advised protecting stored passwords, MFA and passkeys.”
- 2026-11-03 · Social · [Mastodon](https://infosec.exchange/@cloud/117555165421481297): “Password manager mSecure (mSeven Software) emailed current and ex-customers on Nov 3: change passwords, reset 2FA, remove passkeys — after "suspicious activity" it still hasn't detailed.”
- 2026-11-04 · Social · [Mastodon](https://thecybersecguru.com/news/msecure-security-breach-notice/): “mSeven told mSecure users to rotate every password, 2FA code and passkey.”
- 2026-11-04 · Press · [BleepingComputer](https://www.bleepingcomputer.com/news/security/msecure-password-manager-hack-prompts-password-reset-warnings/): “mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database.” (+1 more: [BleepingComputer on Bluesky](https://bsky.app/profile/bleepingcomputer.com/post/3mzipxmnbps2j))
- 2026-11-04 · Social · [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzir7e5uk32w): “A cyberattack targeting mSeven Software, the developer of the mSecure password manager, has triggered a security warning urging current and former customers to change their passwords, reset…”
- 2026-11-04 · Social · [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzjdt6ozfw2j): “mSeven Warns mSecure Users After Theft of Encrypted Cloud Database + Video”
- 2026-11-05 · Social · [Mastodon](https://infosec.exchange/@beyondmachines1/117563490714713048): “mSeven Software disclosed a data breach after an attacker reportedly stole an encrypted database containing mSecure Cloud user information.”
- 2026-11-05 · Social · [Mastodon](https://mastox.eu/@thecybersecguru/117565974329911889): “mSeven Software has warned current AND former mSecure users about suspicious activity.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-238e596fa7&body=https%3A%2F%2Fcve.now%2FSZB-238e596fa7%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about the mSeven breach

### Was mSeven breached?

Yes. mSeven Software says so: “According to the response, mSeven discovered the theft and subsequently notified customers.” (BleepingComputer).

Source: https://www.bleepingcomputer.com/news/security/msecure-password-manager-hack-prompts-password-reset-warnings/

### What should mSeven customers do?

Change your mSecure master password and passwords stored in the vault. Reset two-factor authentication on your mSecure account. Remove and re-register passkeys tied to mSecure.

## Related

- Started as early warning SZB-238e596fa7, first seen 2026-11-03 21:32 UTC
- Early warning [SZB-2de54e00e4](https://cve.now/SZB-2de54e00e4.md)
- Browse: [Breaches](https://cve.now/breaches.md) · [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-238e596fa7
Site guide for agents: https://cve.now/llms.txt